VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 29, 2014· Updated Jun 17, 2026

CVE-2014-0344

CVE-2014-0344

Description

Properties.do in ZOHO ManageEngine OpStor before build 8500 does not properly check privilege levels, which allows remote authenticated users to obtain Admin access by using the name parameter in conjunction with a true value of the edit parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Zohocorp/Manageengine Opstor2 versions
    cpe:2.3:a:zohocorp:manageengine_opstor:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:zohocorp:manageengine_opstor:*:*:*:*:*:*:*:*range: <=8.3
    • (no CPE)range: <8500

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.